$ rpki-client -vvf rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft File: at5OHE4cCb8U36pMPWAPQY4X5y4.mft (raw, json) Hash identifier: SyTpOvj8NG6DaJ+Ll+g/fWyXA1ohzmCW0+wGB/kl6jI= Subject key identifier: 77:EF:93:1A:59:25:20:D7:1A:53:0F:7E:89:63:D0:B3:8D:CA:F1:15 Authority key identifier: 6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E Certificate issuer: /CN=A918429B/serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Certificate serial: 347B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft Manifest number: 347B Signing time: Sat 10 May 2025 14:50:46 +0000 Manifest this update: Sat 10 May 2025 14:50:46 +0000 Manifest next update: Sat 17 May 2025 14:50:45 +0000 Files and hashes: 1: at5OHE4cCb8U36pMPWAPQY4X5y4.crl (hash: VWb1bwHc12G1nOu21uMol121v8iRirqVjmkucCsmoxw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13435 (0x347b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918429B, serialNumber=6ADE4E1C4E1C09BF14DFAA4C3D600F418E17E72E Validity Not Before: May 10 14:50:46 2025 GMT Not After : May 17 14:50:45 2025 GMT Subject: CN=681f67c6-aac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:79:c7:34:fd:a1:62:f5:d7:fd:41:24:8d:6e: aa:2c:b8:42:a0:bd:27:bb:53:3a:d1:4f:9b:ce:a8: b8:1a:64:69:a3:7f:5d:80:58:43:77:f8:a5:31:8f: 0a:06:3a:d5:95:96:cf:47:4e:dd:31:a0:5d:21:5b: 68:25:6d:17:9a:35:c5:aa:14:2d:5e:7c:71:b5:27: 25:35:d1:1e:68:2b:a8:98:e4:24:d3:46:59:99:55: bf:85:0a:87:93:bb:88:e5:6d:18:a3:93:8c:69:45: c8:58:fd:b8:8f:b2:96:c2:a6:88:70:b0:d4:3e:3e: 04:34:5a:40:65:9b:5b:27:f5:93:26:61:f6:9e:e2: 10:0b:d0:a6:f9:97:15:4a:ce:dd:d8:9a:7d:60:34: 4a:90:78:b7:fd:97:db:05:e2:15:8c:42:95:71:1b: 42:72:69:0f:fd:f8:0c:c7:ed:e0:11:d3:e5:10:84: 73:36:85:59:fc:5e:6c:1d:b5:d2:f7:71:fa:00:e4: f2:d4:62:29:db:81:12:7c:62:7e:88:87:b5:f2:ac: e2:29:79:8e:d6:a2:18:0c:d8:02:7c:c2:d4:4d:30: 66:b0:09:22:92:1b:b1:0f:bf:fd:f5:4b:c6:bb:0e: 97:e7:93:57:bb:92:0d:5e:3f:d2:cc:88:10:1b:b2: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EF:93:1A:59:25:20:D7:1A:53:0F:7E:89:63:D0:B3:8D:CA:F1:15 X509v3 Authority Key Identifier: keyid:6A:DE:4E:1C:4E:1C:09:BF:14:DF:AA:4C:3D:60:0F:41:8E:17:E7:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at5OHE4cCb8U36pMPWAPQY4X5y4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918429B/B60063AC1D9711E2BA2E458108B02CD2/at5OHE4cCb8U36pMPWAPQY4X5y4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:05:6e:0f:ad:65:96:1c:70:dd:e7:f9:c0:cf:1c:f7:90:8a: 09:31:28:d7:a2:ac:84:21:31:74:7e:11:2f:77:40:58:b8:e0: 2e:52:91:f9:2e:6e:6c:91:aa:e2:c6:48:b8:da:d0:97:14:ca: ab:5e:6d:29:ec:e9:1b:c5:ec:6f:a7:b8:96:00:22:d7:80:fe: df:d4:7b:89:a9:45:72:61:f9:a3:8a:6a:e6:c6:e7:80:17:85: ee:d4:f6:79:53:73:ff:10:d2:8d:15:82:cd:75:49:a2:6a:e6: e1:99:71:e3:a3:af:63:9a:6b:2c:d3:68:12:55:45:25:29:e5: 31:c6:ef:00:94:a9:f5:b0:39:89:d3:72:3b:a2:60:bc:4f:ef: d1:c4:90:70:5f:c6:72:0f:f8:88:a2:56:87:9f:f5:d7:d8:55: dc:36:1b:2c:33:d2:5f:7b:8a:88:a6:5e:34:fb:07:0a:67:21: 87:9a:b1:23:fc:9c:e5:0d:38:9c:ba:69:14:a9:ef:2e:15:e8: 93:cf:c6:d7:92:5c:5d:db:82:e0:f2:fc:c7:0a:f0:c6:85:c0: 9b:2f:70:5e:f5:2c:11:6f:ec:49:80:fc:f5:62:40:f1:70:4e: 95:bb:42:e5:c7:35:84:34:ac:01:ae:f7:1c:86:58:79:74:24: d1:3c:08:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNHswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyOUIxMTAvBgNVBAUTKDZBREU0RTFDNEUxQzA5QkYxNERGQUE0QzNENjAwRjQx OEUxN0U3MkUwHhcNMjUwNTEwMTQ1MDQ2WhcNMjUwNTE3MTQ1MDQ1WjAYMRYwFAYD VQQDEw02ODFmNjdjNi1hYWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nnHNP2hYvXX/UEkjW6qLLhCoL0nu1M60U+bzqi4GmRpo39dgFhDd/ilMY8K BjrVlZbPR07dMaBdIVtoJW0XmjXFqhQtXnxxtSclNdEeaCuomOQk00ZZmVW/hQqH k7uI5W0Yo5OMaUXIWP24j7KWwqaIcLDUPj4ENFpAZZtbJ/WTJmH2nuIQC9Cm+ZcV Ss7d2Jp9YDRKkHi3/ZfbBeIVjEKVcRtCcmkP/fgMx+3gEdPlEIRzNoVZ/F5sHbXS 93H6AOTy1GIp24ESfGJ+iIe18qziKXmO1qIYDNgCfMLUTTBmsAkikhuxD7/99UvG uw6X55NXu5INXj/SzIgQG7JibQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHfvkxpZ JSDXGlMPfolj0LONyvEVMB8GA1UdIwQYMBaAFGreThxOHAm/FN+qTD1gD0GOF+cu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI5Qi9CNjAwNjNBQzFE OTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0NiOFUzNnBNUFdBUFFZNFg1 eTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2F0NU9IRTRjQ2I4VTM2cE1QV0FQUVk0WDV5NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI5Qi9CNjAwNjNBQzFEOTcxMUUyQkEyRTQ1ODEwOEIwMkNEMi9hdDVPSEU0Y0Ni OFUzNnBNUFdBUFFZNFg1eTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPBW4PrWWWHHDd5/nAzxz3kIoJMSjXoqyEITF0fhEvd0BYuOAuUpH5 Lm5skarixki42tCXFMqrXm0p7Okbxexvp7iWACLXgP7f1HuJqUVyYfmjimrmxueA F4Xu1PZ5U3P/ENKNFYLNdUmiaubhmXHjo69jmmss02gSVUUlKeUxxu8AlKn1sDmJ 03I7omC8T+/RxJBwX8ZyD/iIolaHn/XX2FXcNhssM9Jfe4qIpl40+wcKZyGHmrEj /JzlDTicumkUqe8uFeiTz8bXklxd24Lg8vzHCvDGhcCbL3Be9SwRb+xJgPz1YkDx cE6Vu0LlxzWENKwBrvcchlh5dCTRPAjt -----END CERTIFICATE-----Generated at Sat May 10 16:42:28 2025 by rpki-client